← 返回 Skills 市场

Book Data Recovery

Name: Book Data Recovery
Author: edwardrodriguez703-design

作者 Lokuli · GitHub ↗ · v1.0.1

cross-platform ⚠ suspicious

1401

总下载

当前安装

版本数

在 OpenClaw 中安装

/install book-data-recovery

功能描述

使用说明 (SKILL.md)

uook data recovery

Book data-recovery services through Lokuli's MCP server.

MCP Endpoint

https://lokuli.com/mcp/sse

Transport: SSE | JSON-RPC 2.0 | POST requests

Tools

search

{
  "method": "tools/call",
  "params": {
    "name": "search",
    "arguments": {
      "query": "data-recovery",
      "zipCode": "90640",
      "maxResults": 20
    }
  }
}

check_availability

{
  "method": "tools/call",
  "params": {
    "name": "check_availability",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "date": "2025-02-10"
    }
  }
}

create_booking

{
  "method": "tools/call",
  "params": {
    "name": "create_booking",
    "arguments": {
      "providerId": "xxx",
      "serviceId": "yyy",
      "timeSlot": "2025-02-10T14:00:00-08:00",
      "customerName": "John Doe",
      "customerEmail": "[email protected]",
      "customerPhone": "+13105551234"
    }
  }
}

安全使用建议

This skill appears to be what it says (booking data-recovery), but it leaves out important operational and privacy details. Before installing or enabling it, verify: (1) how the agent authenticates to https://lokuli.com/mcp/sse (is an API key or platform token required?), (2) where customer data (name, email, phone) will come from and ensure the skill prompts for explicit user consent before sending PII, (3) what the privacy policy / data retention policy is for lokuli.com, and (4) that the platform 'tools/call' mechanism will not automatically send profile or system data you didn't intend to share. If you cannot confirm those points, treat the skill as risky and avoid enabling it for autonomous use or for scenarios that involve real personal data.

功能分析

Type: OpenClaw Skill Name: book-data-recovery Version: 1.0.1 The skill bundle defines tools for searching, checking availability, and creating bookings for data-recovery services through an external endpoint `https://lokuli.com/mcp/sse`. While the `create_booking` tool handles sensitive PII (customer name, email, phone), this is directly aligned with the stated purpose of booking services. There is no evidence of prompt injection attempts, unauthorized data exfiltration, malicious execution, persistence mechanisms, or obfuscation in `SKILL.md` or `_meta.json`.

能力评估

ℹ Purpose & Capability

The name/description (book data-recovery via Lokuli MCP) matches the instructions which show search, availability checks, and booking calls. However, the SKILL.md references an external MCP endpoint (https://lokuli.com/mcp/sse) and platform tool calls without explaining authentication or why no credentials are required — this omission reduces confidence in completeness but is not necessarily malicious.

⚠ Instruction Scope

Instructions include example create_booking payloads with customerName, customerEmail, and customerPhone and show concrete zip codes/dates. The doc does not instruct the agent to request explicit user consent before transmitting PII to lokuli.com, nor does it say where to source those customer fields. That creates risk of unintentionally sending personal data. The skill also provides a specific external endpoint to contact, but gives no details about authorization or expected responses.

✓ Install Mechanism

Instruction-only skill with no install spec and no code files — nothing is written to disk. This is the lowest-risk install posture.

ℹ Credentials

No environment variables, credentials, or config paths are requested, which is consistent with an instruction-only skill. However, the skill expects to contact an external MCP API; in practice that often requires an API key or platform-level auth. The absence of any declared credential requirement is an omission worth clarifying.

✓ Persistence & Privilege

The skill does not request always:true and uses default invocation settings. It does not declare any persistent or cross-skill configuration changes.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install book-data-recovery
安装完成后，直接呼叫该 Skill 的名称或使用 /book-data-recovery 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

Fixed display name

v1.0.0

Initial release

元数据

Slug book-data-recovery

版本 1.0.1

许可证 —

累计安装 0

当前安装数 0

历史版本数 2

常见问题